Today we have released Rspamd 3.8.0. The most important features & fixes in this release are highlighted below.

Bayes statistics rework

Bayesian statistics have been reworked to use Redis scripts & now use 3x less network traffic. Learn cache has been reworked to prevent endless growth.

Support for emiting JSON-formatted logs

Rspamd can be configured to emit logs in JSON format, for ease of ingesting & querying with 3rd party logging solutions, such as Grafana Loki.

Other new features

• GTUBE patterns can be fully disabled
• Support for enforcing encryption in proxy
• Support for pinging fuzzy storage
• Support for suppressing DMARC reporting for some particular recipients
• RBL module: support disabling or replacing whitelists per-RBL
• Improved WebUI

Fixes

• Fixed overflow in fuzzy counters
• Fixed issues with the raw header on header insertion/modification
• Fixed multimap rawtext filter

Today we have released Rspamd 3.7.5; the second & likely final release from the stable 3.7 branch.

The following changes are new in 3.7.5:

Fixes:

• Fixed logging in rspamadm (Reported by @cfasnacht)
• Fixed logging when using systemd = true (Reported by @AdamMajer)
• dkim_signing: signing_table: lowercase inputs before lookup (Reported by @EurenikZ)
• Fixed build without hyperscan (Reported by @a16bitsysop)

Features:

• Fix build on loongarch64 (Contributed by @wuruilong01)

Today we have released Rspamd 3.7.4; the first release in the new stable branch of Rspamd 3.7.

The following changes are new in 3.7.4:

Fixes:

• Fixed setproctitle on CentOS-likes
• Fixes for hyperscan cache file handling
• Fixed exclude_local in RBL module
• Properly set config field when loading tasks from Lua
• Set loaded variable explicitly

Features:

• Enable fasttext on RPM based Linux
• Improve FREEMAIL_AFF capture rates
• Add rule for messages missing both X-Mailer and User-Agent header
• Add composite rule for suspicious URLs in suspicious messages

Upgrading notes

The exclude_private_ips setting in RBL module no longer exists in this release (and was broken in previous releases), it can be removed from configuration. This setting is equivalent to exclude_local.

Today we have released Rspamd 3.7.3; this release adds a fix for a regression in the short-lived 3.7.2 release.

The following changes are new in 3.7.2:

Fixes:

• Deal with fmtlib exceptions properly
• DMARC reporting: fix reporting for subdomains
• DMARC: fix munging (by @dzjaivnt)
• ICAP: restore old content-type behaviour; add use_specific_content_type setting
• WebUI: Fix history table vanishing

Features:

• WebUI: Add control to invert action filter
• Rules: Blank spam detection
• Rules: Tighten rspamd’s attachment policy (by @twesterhever)
• RBL: support use of different matchers for return codes

We are excited to introduce Rspamd 3.7.1, the latest iteration of our advanced spam filtering system. Rspamd continues to evolve as a robust and efficient spam filtering solution. This release is packed with new features, enhancements, and crucial bug fixes designed to elevate Rspamd’s performance, versatility, and security to new heights. Let’s delve into the key changes in this version:

Critical fixes:

• Addressed a critical memory leak in the gzip function, ensuring more efficient resource management.

New Features:

• Added support for ICAP Content-Type and Filename, expanding Rspamd’s capabilities for content analysis.
• Introduced the logging->task_max_elts option, providing greater control over logging.
• Added a utility for splitting strings within C++ code, simplifying string manipulation.
• You can now set HTTP authentication parameters for maps, enhancing security.
• Improved configuration error checking during configtest, facilitating the identification and resolution of plugin configuration issues.
• Introduced the known_senders plugin, assisting in the management and recognition of known senders.
• Transitioned to using backward-cpp instead of manual libunwind handling, enhancing code quality and reliability.
• Enhanced RBL (Real-time Blackhole List) support to check numeric URLs individually, enhancing the accuracy of spam detection.

Fixes:

• Addressed various issues in CMakeLists.txt to prevent test failures related to whitespace.
• Corrected the location of the Date: header to conform with RFC standards.
• Ensured the correct format pattern for RE tree tempfile names.
• Fixed format string and length issues, contributing to code stability.
• Improved grammar definitions for content-disposition attributes.
• Enhanced the logic for Redis parameters in the Lua schema enrichment process.
• Resolved a Lua stack corruption issue when logging large tables.
• Fixed the utility for merging tables.
• Ensured the correct output of non-RSA DKIM keys.
• Addressed various corner cases related to parsing single-host URLs.
• Corrected several issues in the url_redirector plugin, improving its functionality.
• Prevented DNSWL (DNS-based Whitelist) sabotage, enhancing spam filtering.
• Resolved dependency registration issues in the RBL plugin when using symbols prefixes.
• Improved the behavior of the rspamadm mime command to avoid conflicts with arguments starting with the letter ‘t’.
• Prevented the matching of messages from the Android GMail app in the MISSING_MIMEOLE check.

Rework

• Reverted to semantic versioning (semver) to provide better versioning consistency.
• Transferred RCL (Rspamd Configuration Language) logic to C++, streamlining configuration processing.

Rspamd 3.7.1 represents another significant stride forward in our ongoing commitment to providing an efficient, reliable, and feature-rich spam filtering solution. We encourage you to upgrade to this latest version to take advantage of these improvements and ensure the continued security of your email communications.